Angular access_token appending to URL and 404